{"vulnerability": "CVE-2026-96940", "sightings": [{"uuid": "294e7c38-3ecf-41a1-88d8-dcb1bd15dc2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d3hnbwmq6tuxv", "content": "CVE-2026-96940 - Microsoft Exchange Server Elevation of Privilege Vulnerability\nCVE ID : CVE-2026-96940\n \n Published : Oct. 2, 2026, 7:06 p.m. | 15\u00a0minutes ago\n \n Description : None\n \n Severity: 8.8 | HIGH\n \n Visit the link for more details, such as CVSS details, affected prod...", "creation_timestamp": "2026-10-02T19:58:14.503307Z"}, {"uuid": "927c34af-326b-44f1-951b-726602f485eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mwwecieask2s", "content": "Es gibt mehrere #Sicherheits #Updates f\u00fcr #Microsoft #Exchange #Server, die gleich mehrere Schwachstellen, u.a. die Elevation of Privilege-Schwachstelle #CVE-2026-96940 schlie\u00dfen.\n\nborncity.com/blog/2026/10...", "creation_timestamp": "2026-10-02T21:53:44.665263Z"}, {"uuid": "ca0801b6-6a25-48c1-903f-6b9cd97495c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96940", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117373543357428712", "content": "Es gibt mehrere #Sicherheits #Updates f\u00fcr #Microsoft #Exchange #Server, die gleich mehrere Schwachstellen, u.a. die Elevation of Privilege-Schwachstelle #CVE-2026-96940 schlie\u00dfen.\nhttps://borncity.com/blog/2026/10/02/exchange-server-sicherheits-updates-vom-2-10-2026-schliessen-cve-2026-96940/", "creation_timestamp": "2026-10-02T21:55:40.950673Z"}, {"uuid": "c189306f-8242-4f7c-8f0c-8757035258c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/eightwone.com/post/3mwwkzpwro22z", "content": "PSA: Exchange Server V2 Security Updates for September were published, additionally addressing CVE-2026-96940 eightwone.com/2026/10/03/v... #MSExchange", "creation_timestamp": "2026-10-02T23:54:07.288727Z"}, {"uuid": "aa66b310-0505-417c-b11e-a6f0e25658fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwwoq6e6mj2i", "content": "Microsoft's September 2026 V2 Exchange Server security updates add CVE-2026-96940 for Exchange SE, 2019 and 2016. Install them now.\n\n#Microsoft #ExchangeServer #ExchangeSE #CVE202696940 #SecurityUpdate #PatchManagement #ESU", "creation_timestamp": "2026-10-03T01:00:21.636988Z"}, {"uuid": "072ad397-958c-44d6-b543-d35075f8d186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/andresbohren.bsky.social/post/3mwx7tn3mxc2x", "content": "\ud83d\udea8New #ExchangeServer SE SU10 V2 has been released out of band\n- V2 release is an addition of CVE-2026-96940\ntinyurl.com/mry232bw", "creation_timestamp": "2026-10-03T06:06:33.518997Z"}, {"uuid": "36459bd5-4c0d-4ee9-a775-bc598a90b02d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/windowsfaq.bsky.social/post/3mwxjxop5gc2v", "content": "Neues Exchange Server Sicherheitsupdate:\nMicrosoft schlie\u00dft mit den V2-Updates CVE-2026-96940 mit CVSS 8,8. Betroffen sind Exchange SE sowie Exchange 2019 und 2016 im ESU-Programm.\n\nwww.windows-faq.de/2026/10/03/c...\n#ExchangeServer #Microsoft #Cybersecurity", "creation_timestamp": "2026-10-03T09:07:44.870438Z"}, {"uuid": "1dd0e2fa-b2bc-4548-80e0-44f4ac88a041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117376670919763256", "content": "CVE-2026-96940 - Privilege Escalation in Microsoft Exchange Server from weak authorization. CVSS 8.8. Currently unpatched. Restrict network access now. #CVE #Microsoft #infosec\nhttps://www.valtersit.com/cve/CVE-2026-96940/", "creation_timestamp": "2026-10-03T11:11:05.470884Z"}, {"uuid": "23fcd837-cbb8-4dd3-9462-70ace6c8200d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96940", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mwyaljkyvk2q", "content": "High-severity flaw in Exchange (CVE-2026-96940) lets authenticated users access others\u2019 mailboxes\u2014Patch with September 2026 V2 now. #ExchangeServer #Microsoft https://thedailytechfeed.com/microsoft-urges-microsoft-exchange-server-users-to-patch-new-high-severity-flaw-cve-2026-96940/", "creation_timestamp": "2026-10-03T15:52:32.780299Z"}, {"uuid": "d6a32073-84bc-4512-92f5-06d3a311cbbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117377926010808121", "content": "We have just added an important vulnerability affecting Microsoft Exchange Server (CVE-2026-96940) https://vuldb.com/vuln/413205", "creation_timestamp": "2026-10-03T16:30:15.978757Z"}, {"uuid": "878699a4-5556-4896-82d3-bfec44d184dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwyjh25m6l2b", "content": "\ud83d\udfe0 CVE-2026-96940 - High (8.8)\n\nWeak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-96940/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T18:31:06.323338Z"}, {"uuid": "b772fe19-8482-4eff-a037-efd1336f69fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mwzkqcebep2a", "content": "On-premises Exchange administrators must install V2 security updates to fix elevation flaws (CVE-2026-96940) #patchmanagement", "creation_timestamp": "2026-10-04T04:26:49.567969Z"}, {"uuid": "619fba70-8074-425b-bd40-ef0d0a4d2727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mwztdfoloh25", "content": "CVE-2026-96940 is trending. Hype score 7, currently #6 on cvemon.\n\nWeak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-96940", "creation_timestamp": "2026-10-04T07:00:42.585452Z"}, {"uuid": "34802aa7-5208-4017-a16b-c846762c4d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mx4cidzrykzg", "content": "Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940 https://gbhackers.com/microsoft-releases-emergency-exchange-server-update/", "creation_timestamp": "2026-10-05T06:37:12.071027Z"}, {"uuid": "a1611690-fef4-4516-bb65-974c4363efe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/cyberbannews_ir/23897", "content": "\u2666\ufe0f \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0647\u0645 Exchange Server \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\n\n\ud83d\udd3a \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647 \u062f\u0648\u0645 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u06f2\u06f0\u06f2\u06f6\u060c \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0647\u0645 \u062f\u0631 Exchange Server \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f.\n\n\ud83d\udd3b \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-96940 \u0648 \u0627\u0645\u062a\u06cc\u0627\u0632 \u06f8.\u06f8 \u0627\u0632 \u06f1\u06f0\u060c \u0646\u0627\u0634\u06cc \u0627\u0632 \u0636\u0639\u0641 \u062f\u0631 \u0633\u0627\u0632\u0648\u06a9\u0627\u0631 \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062d\u0631\u0627\u0632\u200c\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u062e\u0648\u062f \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0648 \u0628\u0647 \u0645\u0646\u0627\u0628\u0639 \u062e\u0627\u0631\u062c \u0627\u0632 \u0645\u062d\u062f\u0648\u062f\u0647 \u0645\u062c\u0627\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\ud83d\udd39 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631:\n\n\ud83d\udd39 Exchange Server 2016 CU23\n\n\ud83d\udd39 Exchange Server 2019 CU14 / CU15\n\n\ud83d\udd39 Exchange Server Subscription Edition\n\n\ud83d\udd39 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0647\u0645\u0686\u0646\u0627\u0646 \u0627\u0632 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062f\u0627\u062e\u0644\u06cc Exchange \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u06f2\u06f0\u06f2\u06f6 \u0631\u0627 \u062f\u0631 \u0627\u0648\u0644\u0648\u06cc\u062a \u0642\u0631\u0627\u0631 \u062f\u0647\u0646\u062f.\n\n#\u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a #\u062a\u0647\u062f\u06cc\u062f_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc\n\n\ud83d\udcc4\ud83d\udd0d @cyberbannews_ir", "creation_timestamp": "2026-10-05T05:23:11.000000Z"}, {"uuid": "429a8d38-bfb3-44e4-8155-852f6f521845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/15444", "content": "Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940 \u2013 gbhackers.com\n\nMon, 05 Oct 2026 13:06:27", "creation_timestamp": "2026-10-05T08:03:33.000000Z"}, {"uuid": "57bdc5d1-4216-4ff4-afec-4ab5918bdcbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/26652", "content": "Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940 \u2013 gbhackers.com\n\nMon, 05 Oct 2026 13:06:27", "creation_timestamp": "2026-10-05T08:03:33.000000Z"}, {"uuid": "0c3a5ce9-703e-4408-b974-65ef198574c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/17258", "content": "Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940 \u2013 gbhackers.com\n\nMon, 05 Oct 2026 13:06:27", "creation_timestamp": "2026-10-05T08:03:33.000000Z"}, {"uuid": "c83ee381-1ff4-4411-b713-1ee8c5907305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mx4qbwesnk2k", "content": "Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/10/05/e...\n\n#cybersecurity #cybersecuritynews #MicrosoftExchange #securityupdate #vulnerability @microsoft.com", "creation_timestamp": "2026-10-05T10:44:11.857136Z"}, {"uuid": "95eea909-b039-4aa4-9d04-4df83158c439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx4qcm45yy2w", "content": "Exchange Server\u306e\u30a2\u30a6\u30c8\u30aa\u30d6\u30d0\u30f3\u30c9\u66f4\u65b0\u3001\u30e1\u30fc\u30eb\u30dc\u30c3\u30af\u30b9\u3078\u306e\u30a2\u30af\u30bb\u30b9\u306b\u95a2\u308f\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-96940\uff09\u3092\u4fee\u6b63\n\nMicrosoft\u306f\u3001Exchange Server\u5411\u3051\u306b\u30a2\u30a6\u30c8\u30aa\u30d6\u30d0\u30f3\u30c9\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002\u4fee\u6b63\u3055\u308c\u305f\u306e\u306f\u91cd\u8981\u5ea6\u300c\u9ad8\u300d\u306e\u8106\u5f31\u6027\uff08CVE-2026-96940\uff09\u3067\u3001\u8a8d\u8a3c\u6e08\u307f\u306e\u653b\u6483\u8005\u304c\u540c\u3058\u7d44\u7e54\u5185\u306e\u4ed6\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u30e1\u30fc\u30eb\u3084\u6dfb\u4ed8\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308c\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002\u305f\u3060\u3057\u3001\u300c\u30c6\u30ca\u30f3\u30c8\u306e\u5883", "creation_timestamp": "2026-10-05T10:44:31.546220Z"}, {"uuid": "de0b8e4a-aa1e-4f28-9624-0ef83e30b09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mx4rmlhiut2u", "content": "Microsoft Issues Out-of-Band Patch for CVE-2026-96940 in Exchange Server", "creation_timestamp": "2026-10-05T11:08:00.398067Z"}, {"uuid": "5c8f111a-620c-490b-81b1-dcd5b4728dc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mx4seymel42p", "content": "Microsoft dropped an emergency patch for CVE-2026-96940 because authenticated miscreants can freely read everyone's mail. Cancel your evening plans, because of course you must.\n\n#justanothertue #patchfatigue", "creation_timestamp": "2026-10-05T11:21:39.367444Z"}, {"uuid": "bcdaaf46-1801-410d-b184-5f7fd29817e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/kelvinsecteam.bsky.social/post/3mx4thkb5il22", "content": "Microsoft patched Exchange Server CVE-2026-96940. This high-severity bug lets authenticated attackers read other users' emails and attachments within the same organization but does not cross tenant boundaries. Discovered internally with no known active exploitation.", "creation_timestamp": "2026-10-05T11:40:59.194267Z"}, {"uuid": "37b637ba-2840-444d-bf24-f6b8aa98bee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mx52fj2hty24", "content": "\ud83d\udd17 CVE : CVE-2026-96940, CVE-2026-96940", "creation_timestamp": "2026-10-05T13:45:06.658569Z"}, {"uuid": "a55c000d-5c96-46eb-8f58-63809891161e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mx5bsdr5r22s", "content": "Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)\n\nwww.helpnetsecurity.com/2026/10/05/e...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-10-05T15:57:34.486936Z"}, {"uuid": "2588b167-f76b-41a3-aa70-1c7f85a6894a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/psoheil.bsky.social/post/3mx5f7wgums2b", "content": "\ud83d\udea8 Microsoft released out-of-band security update for high-severity Exchange Server vulnerability, CVE-2026-96940, rated 8.8  CVSS.\n\n#Cybersecurity #MicrosoftExchange #Vulnerability #InfoSec #EmailSecurity #CloudSecurity #PatchManagement #ZeroTrust #CyberThreats\n\nthehackernews.com/2026/10/micr...", "creation_timestamp": "2026-10-05T16:58:53.015342Z"}, {"uuid": "87a71e40-402f-43bd-81f2-306f7c885bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/dastechno.com/post/3mx5jthmait2t", "content": "Exchange-L\u00fccke CVE-2026-96940: Fremde Postf\u00e4cher lesbar \u2013 Update\n\nMicrosoft schlie\u00dft mit einem au\u00dferplanm\u00e4\u00dfigen Update eine Exchange-L\u00fccke (CVSS 8,8), \u00fcber die angemeldete Nutzer fremde Mails lesen k\u00f6nnen. Betroffen sind nur lokale Server.\n\n#News", "creation_timestamp": "2026-10-05T18:21:21.606128Z"}, {"uuid": "27b9db23-5ba9-4285-a6a6-1b14864102f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mx5jwgmh2h2i", "content": "\ud83e\udd16 Microsoft patched CVE-2026-96940 (CVSS 8.8) in Exchange Server out-of-band: weak authorization lets an authenticated attacker escalate privileges and read other users' mailboxes.\nhttps://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T18:23:00.600029Z"}, {"uuid": "ca7d5889-c1f6-4b10-b427-9910303d3b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/thehackernews/10245", "content": "\u203c\ufe0f ALERT - Exchange admins should review this now.\n\nCVE-2026-96940 can allow an authenticated attacker to access other users\u2019 mailboxes and read emails and attachments within the same organization.\n\nMicrosoft has issued out-of-band fixes.\n\nRead: https://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T16:27:18.000000Z"}, {"uuid": "2b5b750a-04aa-4cba-a755-48b6d0557146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/10245", "content": "\u203c\ufe0f ALERT - Exchange admins should review this now.\n\nCVE-2026-96940 can allow an authenticated attacker to access other users\u2019 mailboxes and read emails and attachments within the same organization.\n\nMicrosoft has issued out-of-band fixes.\n\nRead: https://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T16:27:18.000000Z"}, {"uuid": "dc19480a-4f37-4427-94e0-663d0d6cdd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-av26-1001", "content": "", "creation_timestamp": "2026-10-05T11:53:16.000000Z"}, {"uuid": "009752d6-3b92-4cbe-a568-45812db3714d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mx5vag6uiz24", "content": "Microsoft issued out-of-band fixes for CVE-2026-96940 in Exchange Server. The flaw could let authenticated attackers elevate privileges and read other users' mailboxes in the same organization. #MicrosoftExchange #CVE202696940 #OutOfBand", "creation_timestamp": "2026-10-05T21:45:27.784935Z"}, {"uuid": "9aac2211-8e21-4176-8efd-6def025edf74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mx5vvdoid72k", "content": "Microsoft Exchange Server\u306b\u8a8d\u8a3c\u3055\u308c\u305f\u653b\u6483\u8005\u306b\u3088\u308a\u3001\u4ed6\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u30e1\u30fc\u30eb\u30dc\u30c3\u30af\u30b9\u304c\u8aad\u307f\u53d6\u3089\u308c\u308b\u8106\u5f31\u6027\uff08CVE-2026-96940\uff09\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002", "creation_timestamp": "2026-10-05T21:57:09.174337Z"}, {"uuid": "7b48c82a-9ff7-441e-b60e-e7e07e03a3ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://infosec.exchange/users/securestep9/statuses/117390779687564784", "content": "#Microsoft Exchange Vulnerabilty CVE-2026-96940 Lets Authenticated Attackers Read Other Users' Mailboxes:\n\ud83d\udc47\nhttps://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T22:59:05.784161Z"}, {"uuid": "e9dd1fb4-2448-461d-b365-30fc23fc27c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mx5ze57g7c22", "content": "#Microsoft Exchange Vulnerabilty CVE-2026-96940 Lets Authenticated Attackers Read Other Users' Mailboxes:\n\n\ud83d\udc47", "creation_timestamp": "2026-10-05T22:59:06.980838Z"}, {"uuid": "0ec253bb-1e21-40af-80c7-161f5d66102b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117390847445054802", "content": "\u203c\ufe0f ALERT - Exchange admins should review this now.\nCVE-2026-96940 can allow an authenticated attacker to access other users\u2019 mailboxes and read emails and attachments within the same organization.\nMicrosoft has issued out-of-band fixes.\nRead: https://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T23:16:19.418400Z"}, {"uuid": "51498511-2159-4d91-814a-a105ccb6acde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/VulnerabilityNews/44774", "content": "Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes\n\nMicrosoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions.\n\nThe vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system.\n\n\"Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a\nhttps://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T23:01:06.000000Z"}, {"uuid": "1ca497ef-94ef-4f39-8be5-bcbf90e69b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/44774", "content": "Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes\n\nMicrosoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions.\n\nThe vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system.\n\n\"Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a\nhttps://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T23:01:06.000000Z"}, {"uuid": "b8826864-bf70-4b01-a703-d5ff2968d5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/pphm_HackerNews/3458", "content": "\ud83d\udd34 Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes\n\nMicrosoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions.\n\nThe vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system.\n\n\"Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network,\" Microsoft said in an advisory released on October 2, 2026.", "creation_timestamp": "2026-10-06T01:18:04.000000Z"}, {"uuid": "66802a1a-36d8-4265-bbf2-df6dec8e5f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/raven-sec.bsky.social/post/3mx6qx7thhtxp", "content": "Five critical infrastructure flaws under active attack\n\n\u2022 vm2 sandbox escapes enable arbitrary code execution\n\u2022 CVE-2026-96940: Exchange privilege escalation flaw\n\n5 sources verified \u00b7 hackingallthethings.com\n#infosec #threatintel #cybersecurity #CriticalVulnerabilities #InfrastructureSecurity", "creation_timestamp": "2026-10-06T06:06:46.768962Z"}, {"uuid": "1e951b06-7872-4c76-ac17-a505bac49a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mx6ravb2ri2u", "content": "Five critical infrastructure flaws under active attack\n\n\u2022 vm2 sandbox escapes enable arbitrary code execution\n\u2022 CVE-2026-96940: Exchange privilege escalation flaw\n\n5 sources verified \u00b7 mashingallthethings.com\n#infosec #threatintel #potatosecurity #CriticalVulnerabilities #InfrastructureSecurity", "creation_timestamp": "2026-10-06T06:06:48.902195Z"}, {"uuid": "29b1d06a-958f-4d03-a5b5-e7c21a51b714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mx6u75ilxs24", "content": "Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)\n\nMicrosoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity vulnerability (CVE-2026-96940) that may allow authenticated attackers to re\u2026\n#hackernews #microsoft #news", "creation_timestamp": "2026-10-06T06:59:31.080775Z"}, {"uuid": "55c47c1e-2ff6-4a3e-983f-e59348387132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "Telegram/7x3P5T--NflQEsWSvG6uL2FcSk64zEA_ybgHP6Fl6W75d5A", "content": "", "creation_timestamp": "2026-10-06T07:00:14.000000Z"}, {"uuid": "346f0c19-8212-43c8-9463-865a72bcd833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117393145545135883", "content": "Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes\nMicrosoft has released out-of-band security updates for a high-severity flaw in Microsoft Exchange Server tracked as CVE-2026-96940 (CVSS 8.8). Weak authorization allows an authenticated attacker to elevate privileges and read other users' mailboxes under certain conditions. https://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-06T09:00:45.639110Z"}, {"uuid": "caa0285e-6b1b-4533-b87b-71a6f54cdf66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mx72xyr6zy2a", "content": "Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes\n\nMicrosoft has released out-of-band security updates for a high-severity flaw in Microsoft Exchange Server tracked as CVE-2026-96940 (... https://threatintel.cc/2026/10/06/microsoft-exchange-flaw-lets-authenticated.html", "creation_timestamp": "2026-10-06T09:00:46.630391Z"}, {"uuid": "6692e4e4-03a4-4329-abf2-8aa7d2136702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "published-proof-of-concept", "source": "Telegram/7x3P5T--NflQEsWSvG6uL2FcSk64zEA_ybgHP6Fl6W75d5A", "content": "", "creation_timestamp": "2026-10-06T07:00:14.000000Z"}, {"uuid": "f3036b6e-f7ae-437e-9df2-91ce0106db1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "Telegram/O7QylDWIptZONXEuPsqIMfiYsCbRi0BZoyF_J21d4yXsw7o", "content": "", "creation_timestamp": "2026-10-06T09:00:04.000000Z"}]}